Route Origin Authorization

$ rpki-client -vvf k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/1/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
File:                     3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa (raw, json)
Hash identifier:          EZXAnTq0YfH7I3nQ5DwygJtq83t5tJ+r29KZS7L/aX0=
Subject key identifier:   5A:0F:06:67:49:AE:9B:52:63:B0:5E:E2:62:0C:2F:97:93:EE:9E:0A
Certificate issuer:       /CN=5BDDBE07CFB3DC30BCB7145DF8AEFF3168E98C83
Certificate serial:       4EDDDA0C074AA24D9526944343FA73FDE52BEC9F
Authority key identifier: 5B:DD:BE:07:CF:B3:DC:30:BC:B7:14:5D:F8:AE:FF:31:68:E9:8C:83
Authority info access:    rsync://rpki.athene-center.net/repo/rpki-athene-center/0/5BDDBE07CFB3DC30BCB7145DF8AEFF3168E98C83.cer
Subject info access:      rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/1/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa
Signing time:             Fri 05 Jul 2024 07:46:48 +0000
ROA not before:           Fri 05 Jul 2024 07:41:48 +0000
ROA not after:            Fri 04 Jul 2025 07:46:48 +0000
asID:                     208162
IP address blocks:        158.220.129.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:dd:da:0c:07:4a:a2:4d:95:26:94:43:43:fa:73:fd:e5:2b:ec:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BDDBE07CFB3DC30BCB7145DF8AEFF3168E98C83
        Validity
            Not Before: Jul  5 07:41:48 2024 GMT
            Not After : Jul  4 07:46:48 2025 GMT
        Subject: CN=5A0F066749AE9B5263B05EE2620C2F9793EE9E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:69:c2:d1:35:fe:6d:aa:12:0b:05:67:c8:
                    4e:2b:a6:1f:1e:4c:a9:fb:86:43:47:32:23:ac:e6:
                    13:aa:75:a2:fd:9b:fa:7a:94:8a:37:71:94:89:b4:
                    b8:d4:6c:6b:4d:dd:f9:f1:34:da:b0:ad:fd:7f:26:
                    74:73:58:05:3f:a1:c9:76:a5:1d:c1:47:93:09:5a:
                    86:df:03:8f:af:81:6a:ea:8c:c6:02:76:fe:ea:7d:
                    e7:d3:6e:ad:99:0f:f0:5c:de:09:12:eb:87:4c:6f:
                    36:b7:01:41:53:6a:f4:12:95:9b:3b:ec:69:6e:c9:
                    f8:4d:12:fc:ce:1b:c5:b6:79:f7:bb:3c:3e:42:4d:
                    90:ce:68:36:d6:33:0e:5a:f2:94:80:15:5a:8f:04:
                    6d:0e:04:44:38:c4:fb:11:d6:21:aa:56:eb:b0:9e:
                    f3:4b:96:89:97:49:69:f7:2e:b7:f2:45:a4:d0:dd:
                    c5:0d:bb:3b:9c:9f:30:35:74:34:1e:1f:eb:8d:a0:
                    49:05:47:f4:9f:38:8a:24:cc:fd:41:2a:b4:b3:11:
                    18:1a:ef:39:61:79:02:e1:da:59:bb:01:1d:c3:d0:
                    af:bf:db:74:90:a1:b7:99:0f:40:2e:51:4f:e8:6e:
                    48:d5:9e:31:ab:11:6a:36:ed:c7:22:3c:7e:0f:c3:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:06:67:49:AE:9B:52:63:B0:5E:E2:62:0C:2F:97:93:EE:9E:0A
            X509v3 Authority Key Identifier:
                keyid:5B:DD:BE:07:CF:B3:DC:30:BC:B7:14:5D:F8:AE:FF:31:68:E9:8C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/1/5BDDBE07CFB3DC30BCB7145DF8AEFF3168E98C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.athene-center.net/repo/rpki-athene-center/0/5BDDBE07CFB3DC30BCB7145DF8AEFF3168E98C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://k00.rrdp-rpki.athene-center.net/repo/k00-rpki-athene-center/1/3135382e3232302e3132392e302f32342d3234203d3e20323038313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.220.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:77:7b:39:43:7a:0f:c4:d0:e7:88:a9:c9:6c:95:5d:d1:72:
         38:27:7b:b8:a6:4e:2a:27:92:27:82:87:be:3b:e7:a9:64:fe:
         7e:bd:43:6d:45:db:50:25:cb:e0:f2:30:ee:ea:07:6c:dd:28:
         a3:6a:10:50:e1:89:9d:f4:9d:c4:09:e8:42:9c:d6:c5:b0:f7:
         f5:21:eb:ce:f8:75:6a:e3:2e:52:76:d1:b9:71:86:23:6a:5b:
         8f:4e:a1:87:70:45:2d:5a:6e:ef:08:e4:9f:58:e9:6d:6f:3b:
         f1:ca:c6:67:1d:98:9a:d4:9a:60:76:30:2f:65:35:ab:9d:4e:
         1a:d3:87:87:09:a7:be:e7:cc:3e:e6:6b:20:c5:2f:7c:dd:7c:
         18:3c:00:55:98:15:20:15:61:c4:45:8a:a8:4f:32:57:9e:2e:
         7d:93:31:ec:88:76:c8:9c:f8:07:e4:a4:1c:46:13:f3:cf:ff:
         e2:17:70:36:f2:91:f7:a4:f7:01:01:31:96:9e:b6:3c:8d:47:
         40:cc:7d:b6:7f:b0:02:51:6a:22:41:7f:e4:67:d7:a4:07:0f:
         48:c1:53:bf:9a:06:c7:df:d8:1a:c9:c4:51:8a:b6:5f:b8:ee:
         f9:7a:9f:4a:ce:58:4a:4f:d3:fb:bc:b3:bd:c7:88:c2:43:fd:
         4e:8b:b9:91
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgIUTt3aDAdKok2VJpRDQ/pz/eUr7J8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJEREJFMDdDRkIzREMzMEJDQjcxNDVERjhBRUZGMzE2
OEU5OEM4MzAeFw0yNDA3MDUwNzQxNDhaFw0yNTA3MDQwNzQ2NDhaMDMxMTAvBgNV
BAMTKDVBMEYwNjY3NDlBRTlCNTI2M0IwNUVFMjYyMEMyRjk3OTNFRTlFMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDoGnC0TX+baoSCwVnyE4rph8e
TKn7hkNHMiOs5hOqdaL9m/p6lIo3cZSJtLjUbGtN3fnxNNqwrf1/JnRzWAU/ocl2
pR3BR5MJWobfA4+vgWrqjMYCdv7qfefTbq2ZD/Bc3gkS64dMbza3AUFTavQSlZs7
7GluyfhNEvzOG8W2efe7PD5CTZDOaDbWMw5a8pSAFVqPBG0OBEQ4xPsR1iGqVuuw
nvNLlomXSWn3LrfyRaTQ3cUNuzucnzA1dDQeH+uNoEkFR/SfOIokzP1BKrSzERga
7zlheQLh2lm7AR3D0K+/23SQobeZD0AuUU/obkjVnjGrEWo27cciPH4Pw5XbAgMB
AAGjggJAMIICPDAdBgNVHQ4EFgQUWg8GZ0mum1JjsF7iYgwvl5PungowHwYDVR0j
BBgwFoAUW92+B8+z3DC8txRd+K7/MWjpjIMwDgYDVR0PAQH/BAQDAgeAMIGDBgNV
HR8EfDB6MHigdqB0hnJyc3luYzovL2swMC5ycmRwLXJwa2kuYXRoZW5lLWNlbnRl
ci5uZXQvcmVwby9rMDAtcnBraS1hdGhlbmUtY2VudGVyLzEvNUJEREJFMDdDRkIz
REMzMEJDQjcxNDVERjhBRUZGMzE2OEU5OEM4My5jcmwwgYEGCCsGAQUFBwEBBHUw
czBxBggrBgEFBQcwAoZlcnN5bmM6Ly9ycGtpLmF0aGVuZS1jZW50ZXIubmV0L3Jl
cG8vcnBraS1hdGhlbmUtY2VudGVyLzAvNUJEREJFMDdDRkIzREMzMEJDQjcxNDVE
RjhBRUZGMzE2OEU5OEM4My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vazAwLnJyZHAtcnBraS5hdGhlbmUtY2VudGVyLm5ldC9y
ZXBvL2swMC1ycGtpLWF0aGVuZS1jZW50ZXIvMS8zMTM1MzgyZTMyMzIzMDJlMzEz
MjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM4MzEzNjMyLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAntyBMA0GCSqGSIb3DQEBCwUAA4IBAQBId3s5Q3oPxNDniKnJbJVd0XI4J3u4
pk4qJ5Ingoe+O+epZP5+vUNtRdtQJcvg8jDu6gds3SijahBQ4Ymd9J3ECehCnNbF
sPf1IevO+HVq4y5SdtG5cYYjaluPTqGHcEUtWm7vCOSfWOltbzvxysZnHZia1Jpg
djAvZTWrnU4a04eHCae+58w+5msgxS983XwYPABVmBUgFWHERYqoTzJXni59kzHs
iHbInPgH5KQcRhPzz//iF3A28pH3pPcBATGWnrY8jUdAzH22f7ACUWoiQX/kZ9ek
Bw9IwVO/mgbH39gaycRRirZfuO75ep9KzlhKT9P7vLO9x4jCQ/1Oi7mR
-----END CERTIFICATE-----
Generated at Sat Jul 6 19:53:01 2024 by rpki-client on console-ams.rpki-client.org